CVE-2026-20857CWE-822

CVE-2026-20857

High · published January 13, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
40.3
In the wild
Unconfirmed
What it is

⚡ An authorized attacker could use this untrusted pointer dereference to elevate their privileges right under your nose! 🦸‍♂️ Think of it like a guest at a hotel sneaking into a staff-only area because they found a door that wasn’t locked — they have access to sensitive operations that should have been off-limits! This vulnerability allows an attacker with local access to gain elevated privileges, potentially leading to a complete takeover of the system. They could manipulate files, alter settings, or even install malicious software, all without detection. The consequences could be absolutely devastating for any system that falls victim to this breach.

Put simply

Think of it like a guest at a hotel sneaking into a staff-only area because they found a door that wasn’t locked — they have access to sensitive operations that should have been off-limits! CVE-2026-20857 in the Windows Cloud Files Mini Filter Driver occurs due to an untrusted pointer dereference, which allows local attackers to exploit this flaw for privilege escalation.

What to do

This vulnerability allows an attacker with local access to gain elevated privileges, potentially leading to a complete takeover of the system. They could manipulate files, alter settings, or even install malicious software, all without detection. The consequences could be absolutely devastating for any system that falls victim to this breach. To remediate this vulnerability, ensure you apply the latest Microsoft security updates. Regularly monitor and manage permissions for local users and audit your security policies to mitigate any potential threats. This is fixable! Stay proactive, follow these steps, and you’ll bolster your defenses in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00478 · 40.3th percentile
Weakness
CWE-822 · Untrusted Pointer Dereference
Published
2026-01-13T23:16Z
Affected products (11)
ProductVersionsFixed in
microsoft/windows_10_1809< 10.0.17763.827610.0.17763.8276
microsoft/windows_10_1809< 10.0.17763.827610.0.17763.8276
microsoft/windows_10_21h2< 10.0.19044.680910.0.19044.6809
microsoft/windows_10_22h2< 10.0.19045.680910.0.19045.6809
microsoft/windows_11_23h2< 10.0.22631.649110.0.22631.6491
microsoft/windows_11_24h2< 10.0.26100.762310.0.26100.7623
microsoft/windows_11_25h2< 10.0.26200.762310.0.26200.7623
microsoft/windows_server_2019< 10.0.17763.827610.0.17763.8276
microsoft/windows_server_2022< 10.0.20348.464810.0.20348.4648
microsoft/windows_server_2022_23h2< 10.0.25398.209210.0.25398.2092
microsoft/windows_server_2025< 10.0.26100.3223010.0.26100.32230
References (1)
EPSS history
Timeline
  • 13 JAN 17:56Z
    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
    cvelistv5